A simple way I use is to put the following line inside sshd_config:
MaxAuthTries 1
So that an attacker can only try 2 wrong passwords.
It's sometime annoying when I myself type the wrong password 2 times and get the connection
dropped, but most times I type the password correctly, so that's not a problem at all.